12226 matches found
Command injection
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before...
CVE-2020-14442
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before...
CVE-2020-14442
CVE-2020-14442 affects several NETGEAR WiFi systems (RBK752, RBK753, RBK753S, RBR750, RBS750, RBK842, RBR840, RBS840, RBK852, RBK853, RBR850, RBS850) with versions before 3.2.15.25. The root cause is a pre-auth command injection vulnerability that allows an unauthenticated attacker to execute com...
CVE-2020-14441
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before...
CVE-2020-14441
CVE-2020-14441 affects several NETGEAR Wi‑Fi router/mesh devices (e.g., RBK752/RBK753/RBK753S/RBR750/RBS750/RBK842/RBR840/RBS840/RBK852/RBK853/RBR850/RBS850) with pre‑3.2.15.25 firmware. The vulnerability is unauthenticated command injection. Root cause details are not provided in the material, n...
CVE-2020-14440
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before...
CVE-2020-14440
CVE-2020-14440 affects certain NETGEAR WiFi systems (RBK/RBR/RBS series) with firmware before 3.2.15.25, where an unauthenticated attacker can perform command injection. Impact is described as high/critical by CVSS in some vectors; in practice, the issue implies potential pre-authentication remot...
CVE-2020-14439
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before...
CVE-2020-14439
CVE-2020-14439 affects certain NETGEAR WiFi systems (RBK/RBR/RBS families) with firmware before 3.2.15.25. The issue is unauthenticated command injection, caused by an input handling flaw that allows arbitrary commands to be executed in affected devices. Products listed include RBK752, RBK753, RB...
CVE-2020-14438
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before...
CVE-2020-14438
CVE-2020-14438 affects a range of NETGEAR devices (RBK/RBR/RBS series) with firmware versions before 3.2.15.25. The vulnerability is a pre-authenticated command injection in affected devices, exploitable by an unauthenticated attacker on an adjacent network. Impact is described as high to critica...
CVE-2020-14437
CVE-2020-14437 describes a pre-auth command injection affecting certain NETGEAR WiFi/system devices. The Red Hat advisory lists affected models and firmware ranges: RBK752, RBK753, RBK753S, RBR750, RBS750, RBK842, RBR840, RBS840, RBK852, RBK853, RBR850, and RBS850, all before firmware version 3.2...
CVE-2020-14437
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before...
CVE-2020-14436
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before...
CVE-2020-14436
CVE-2020-14436 affects certain NETGEAR WiFi systems (RBK/RBR/RBS families) with firmware versions before 3.2.15.25. The underlying issue is a pre-authentication command injection vulnerability in affected devices. Impact details in the CVSS vectors indicate high confidentiality, integrity, and av...
CVE-2020-14435
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before 2.5.2.104, SRK60B04 before 2.5.2.104, SRK60B05 before 2.5.2.104, and SRK60B06 before 2.5.2.104...
CVE-2020-14435
CVE-2020-14435 affects certain NETGEAR WiFi systems (SRK60, SRS60, SRR60 and the SRK60B0x variants) with firmware before 2.5.2.104. The issue is unauthenticated command injection, exploitable over an adjacent network, with impact components including confidentiality, integrity, and availability p...
CVE-2020-14434
CVE-2020-14434 affects multiple NETGEAR WiFi/mesh devices (RBK752, RBK753, RBK753S, RBR750, RBS750, RBK852, RBK853, RBR850, RBS850, RBK842, RBR840, RBS840) and relates to a command-injection vulnerability caused by an authenticated user. The issue concerns the device’s handling of input that can ...
CVE-2020-14434
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25,...
CVE-2020-14433
CVE-2020-14433 affects multiple NETGEAR WiFi systems (RBK/RBR/RBS series). The issue is a command injection vulnerability exploitable by an authenticated user, with affected firmware versions listed as before 3.2.15.25. Impact is authenticated command execution on the device, requiring administra...